CVE-2015-1340

LXD before version 0.19-0ubuntu5 doUidshiftIntoContainer has an unsafe Chmod call that races against the stat in the Filepath.Walk function. A symbolic link created in that window could cause any file on the system to have any mode of the attacker's choice...

CVE-2015-1343

CVE-2015-1343 affects unity-scope-gdrive; all versions log search terms to syslog. The connected documents consistently describe a logging behavior that may expose user search data via syslog, implying potential information disclosure. The provided sources do not include root-cause details, affec...

CVE-2015-1316

Juju Core’s Joyent provider is affected in releases before 1.25.5 where the component uploads the user’s private SSH key. The vulnerability stems from improper handling of SSH material, enabling potential exposure of private keys. Impact is described as private key disclosure, with CVSS metrics i...

CVE-2015-1316 Juju Joyent provider uploads user's private ssh key by default

Juju Core's Joyent provider before version 1.25.5 uploads the user's private ssh key...

CVE-2015-1326

CVE-2015-1326 affects python-dbusmock prior to 0.15.1. The AddTemplate() D-Bus call or DBusTestCase.spawn_server_template() could be tricked into executing malicious code if a crafted .pyc file is supplied, enabling arbitrary code execution on affected systems. The vulnerability is triggered duri...

CVE-2015-1320

The CVE describes a credential disclosure issue in the SeaMicro provisioning used by Ubuntu MAAS: credentials (username and password) are logged by the management interface. Affected are MAAS versions before 1.9.2. This is tied to the SeaMicro provisioning flow and exposes sensitive data via logs...

CVE-2015-1320 Probe-and-enlist for SeaMicro chassis writes password to the log

The SeaMicro provisioning of Ubuntu MAAS logs credentials, including username and password, for the management interface. This issue affects Ubuntu MAAS versions prior to 1.9.2...

Security fix for the ALT Linux 10 package libtiff version 4.0.10.0.57.f9fc01c3-alt1

April 9, 2019 Vladimir D. Seleznev 4.0.10.0.57.f9fc01c3-alt1 - Updated to v4.0.10-57-gf9fc01c3 ALT 36575, 34677. - Applied SUSE patches: + tiff-4.0.3-seek.patch; + tiff-4.0.3-compress-warning.patch; + tiff-CVE-2018-12900.patch. - Built with support of: + libjbig; + libwebp; + libzstd. - Fixes: +...

EulerOS Virtualization 2.5.4 : libXcursor (EulerOS-SA-2019-1191)

According to the version of the libXcursor package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - libxcursor: 1-byte heap-based overflow in XcursorThemeInherits function in library.c CVE-2015-9262 Note that Tenable Network...

EulerOS Virtualization 2.5.3 : ntp (EulerOS-SA-2019-1222)

According to the versions of the ntp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a...

F5 Networks BIG-IP : GnuTLS vulnerability (K54022413)

GnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a certificate. CVE-2015-0294 Impact GnuTLS does not check if all sections of X.509 certificates indicate the same signature algorithm. This flaw, in combination with a different flaw, can lead to a bypass of...

VulnCheck KEV: CVE-2015-1427

The Groovy scripting engine in Elasticsearch allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands...

EulerOS Virtualization 2.5.3 : ghostscript (EulerOS-SA-2019-1177)

According to the version of the ghostscript package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - An integer overflow flaw was discovered in one of Ghostscript's memory allocation routines. A remote attacker could possibly...

CVE-2015-5462

creationtimestamp| type| source ---|---|--- 2019-04-04 00:29:37+00:00| seen| https://t.me/cibsecurity/3525...

CVE-2015-5463

creationtimestamp| type| source ---|---|--- 2019-04-04 00:29:36+00:00| seen| https://t.me/cibsecurity/3524...

CVE-2015-5384

CVE-2015-5384 affects AxiomSL’s Axiom Google Web Toolkit module up to version 9.5.3 and earlier, which is vulnerable to a Session Fixation attack. The connected CNVD entry confirms the affected version but provides no additional vulnerability details or remediation in the provided documents.

CVE-2015-5462

CVE-2015-5462 affects AxiomSL’s Axiom Google Web Toolkit module (versions 9.5.3 and earlier). The root cause is an HTML injection vulnerability in the scoping dashboard features, allowing remote attackers to inject HTML. The issue is exploitable over the network without authentication (per CVSS v...

CVE-2015-5606

CVE-2015-5606 affects Vordel XML Gateway (acquired by Axway) version 7.2.2. The vulnerability allows remote attackers to cause a denial of service via a specially crafted request. The available connected documents confirm the product and impact but do not provide exploit details, affected subcomp...

Debian: Security Advisory (DLA-1740-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-1740-1 : libav security update

Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. CVE-2015-1872 The ffmjpegdecodesof function in libavcodec/mjpegdec.c did not validate the number of components in a JPEG-LS Start Of Frame segment, which allowed remote attackers to caus...